Privacy Policy

1. Information we collect

We collect only what is needed to operate and improve the Service.

Account information: Email address, authentication identifiers (e.g. from Google sign-in or email/password), display name, and profile details you choose to provide.

Relationship Map (onboarding): Relationship status, dynamics, friction points, and pacing preferences you enter during setup.

Dynamic metrics: Scores and activity related to emotional, physical, communication, trust, playfulness, and alignment pillars as you use the app.

Sanctuary vault ("Secret Whispers"): Free-text entries you submit to private vault features.

Community and messaging: Posts, comments, likes, and direct messages you create when using forum and chat features.

Usage data: Completed Sparks, timestamps, feature interactions, and technical logs (IP address, browser/device type, error logs) for security and reliability.

Payment and subscription data: When you purchase Premium, we receive and store:

• Plan purchased, amount paid, currency, and payment status
• Razorpay order and payment identifiers
• Premium start and expiry dates tied to your account
• Limited billing metadata (e.g. payment method type), as provided by Razorpay — we do not store full card numbers, CVV, or UPI PIN

2. How we use your information

We use your data to provide, secure, and improve the Service. We do not sell your personal relationship data or use it for third-party advertising.

Personalized coaching: Your Relationship Map and metrics are processed (including via secure AI APIs) to generate Daily Sparks and related guidance.

Human-in-the-loop (HITL): Authorized internal reviewers may access specific encrypted Sanctuary submissions to calibrate responses before they reach you. Access is limited and confidential.

Community features: Content you post or send is displayed to other users according to product rules (e.g. feed visibility, direct messages).

Premium access: We use payment and subscription records to activate, enforce, and expire Premium features, handle billing support, and comply with tax and accounting obligations.

Security and integrity: Detecting abuse, fraud, unauthorized access, and technical issues.

3. Third-party service providers

We share data with vetted subprocessors only as needed to run the Service:

• Razorpay— payment processing, fraud prevention, and receipts. Razorpay's privacy policy applies to data you provide at checkout: razorpay.com/privacy
• Firebase / Google Cloud — authentication, hosting, and cloud infrastructure
• MongoDB Atlas — encrypted database hosting
• AI providers (e.g. xAI) — secure API processing for generated content; configured to prohibit use of your data for training public models where supported

We may also disclose information if required by law, valid legal process, or when we believe disclosure is necessary to prevent imminent harm (e.g. credible threats of violence or abuse).

4. Data security

We use industry-standard measures including encryption in transit (TLS) and at rest for sensitive data, access controls, and monitoring. No online service is 100% secure; please use discretion with highly sensitive information in free-text fields.

5. Data retention

We retain account and relationship data while your account is active. Payment records may be kept longer as required for tax, accounting, fraud prevention, and legal compliance. When you delete your account, we delete or anonymize personal data from active systems within a reasonable period, subject to legal retention requirements.

6. Your rights and choices

Depending on your location (including under India's Digital Personal Data Protection Act, 2023, where applicable), you may have the right to:

• Access a copy of personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Withdraw consent where processing is consent-based, subject to legal limits

To exercise these rights, email admin@theinmost.com or use our contact form. We will respond within timelines required by applicable law.

For payment data held by Razorpay, you may also contact Razorpay directly regarding payment-specific privacy requests.

7. Children's privacy

The Service is for adults 18 and older. We do not knowingly collect data from minors. If we learn a minor has provided personal data, we will delete it promptly.

8. International transfers

Your data may be processed in India and other countries where our providers operate (including the United States and the European Economic Area, depending on vendor regions). We use appropriate safeguards required by applicable law for cross-border transfers.

9. Changes to this policy

We may update this Privacy Policy for legal, technical, or product changes. Material updates — especially regarding AI, HITL, or payment processing — will be communicated via the app or email where practicable before they take effect.

10. Contact

Privacy questions: admin@theinmost.com. Billing questions: see our Refund & Cancellation Policy and Pricing pages.